Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/ac9c6811-f8d5-31d1-9591-ef0f43b27229.roa
File:                     ac9c6811-f8d5-31d1-9591-ef0f43b27229.roa (raw, json)
Hash identifier:          AessytqOmyR362dxOWke+9ERAgSE0wVN+LOquceqw4A=
Subject key identifier:   1A:74:1F:76:64:C3:6C:99:F2:2C:B1:8F:5C:EF:50:87:49:B3:BA:D7
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584A698B1F92B42AE77B785FAE00
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/ac9c6811-f8d5-31d1-9591-ef0f43b27229.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        216.139.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:1f:92:b4:2a:e7:7b:78:5f:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=63030460-4493-471d-8e15-1ab7aa1d76a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:af:5d:8d:96:95:56:85:71:31:9f:68:d3:
                    2c:e6:3b:ef:3b:1c:dc:3f:4a:35:08:45:68:7b:ae:
                    84:d8:d2:45:c3:b4:98:d4:04:4b:d3:b9:e4:4f:3d:
                    cf:88:ba:33:99:99:6d:0d:2c:67:60:7f:da:d8:36:
                    02:12:51:12:34:71:6e:16:84:e1:f9:fb:7d:82:2b:
                    3f:75:72:a9:8e:30:3b:19:06:2c:27:77:90:48:29:
                    22:07:f3:e5:15:bd:26:2f:c9:54:33:3d:67:31:0f:
                    6a:d3:7c:90:25:18:7f:65:ea:85:ff:91:dc:f6:42:
                    60:5b:cf:73:54:87:6a:6f:81:d0:ea:5e:53:18:db:
                    84:1b:82:a1:0a:19:59:ac:74:54:77:f4:95:30:09:
                    63:9a:23:de:b7:79:07:1a:89:4b:68:b4:13:4c:42:
                    29:24:e5:bb:40:2b:05:36:7e:93:5e:25:93:a9:17:
                    3d:3c:65:bd:a7:92:02:de:28:fc:c0:d3:46:84:69:
                    21:3c:95:ae:6b:06:8f:1f:a8:ee:d9:ef:1a:da:1b:
                    1e:34:b0:00:c1:ad:04:f3:2f:2a:f6:89:88:0d:04:
                    94:f1:25:6e:78:82:28:22:4f:94:e5:63:9c:6c:f9:
                    23:8f:8f:eb:66:34:e4:64:28:42:dc:32:e9:95:8b:
                    84:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:74:1F:76:64:C3:6C:99:F2:2C:B1:8F:5C:EF:50:87:49:B3:BA:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/ac9c6811-f8d5-31d1-9591-ef0f43b27229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:7b:65:c6:94:bd:fc:a4:da:ae:61:f4:4a:f7:e9:65:12:df:
         ae:31:02:ea:73:3e:1c:4c:27:0c:9a:11:6a:90:48:78:e1:8a:
         a1:4f:0c:a1:23:cf:ea:98:d3:a6:a6:4a:89:15:8d:e1:ec:56:
         34:54:66:ee:16:e4:74:27:c0:66:7e:f4:e4:88:ae:84:9a:5f:
         23:3d:3c:96:8f:9f:92:d6:27:b1:d0:04:4d:f4:cb:c0:fb:dc:
         64:65:bf:e3:bb:97:18:f7:39:40:5b:77:33:93:25:9f:33:b0:
         42:72:f5:1f:f4:f6:da:df:07:56:e3:f1:45:5b:10:04:a8:9e:
         a7:c1:bc:4b:33:f1:2f:8d:d5:6d:0a:38:38:8a:8e:c5:b8:0b:
         71:d9:91:30:a5:a1:ac:68:16:5d:75:2c:ac:c5:52:b5:c0:06:
         6e:15:4b:5f:41:b5:21:6c:d3:94:18:3c:00:97:77:ae:15:2b:
         fa:ce:66:5e:e0:26:29:4c:fe:e1:3a:16:05:fc:74:0f:0f:22:
         08:5d:5d:33:e6:66:3d:36:14:e0:5a:23:f0:8e:c7:6e:d7:3b:
         4e:cd:7e:54:7f:16:c5:fd:34:2a:8e:7b:29:e8:6c:19:7c:09:
         ff:7d:6f:6a:39:30:8a:c6:c7:28:1b:c2:fd:df:42:09:c4:6f:
         df:9d:c4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:44:05 2025 by rpki-client